Imagine settling into a dentist’s chair, breathing through the laughing-gas mask, when your dentist announces he’ll also be performing brain surgery. “Relax,” he says, opening a fictional app…

A tech lead wanted a Software Risk Register — the ability to answer 'which repos use log4j, which versions, and do they have CVEs?' Here's how a per-repo SBOM and a component-centric view answer that ...

It leverages the network-like architecture of scientific models together with software quality metrics to identify chains of function calls that are more prone to generating and propagating errors. It operates on tbl_graph objects representing call dependencies between functions (callers and callees) and computes risk scores for individual functions and for paths (sequences of function calls) based on cyclomatic complexity, in-degree and betweenness centrality. The package supports variance-based uncertainty and sensitivity analyses after Puy et al. (2022) &lt;<a href="https://doi.org/10.18637%2Fjss.v102.i05" target="_top">doi:10.18637/jss.v102.i05</a>&gt; to assess how risk scores change under alternative risk definitions.

Developers using AI coding assistants are producing code as much as four times faster than their unassisted peers, but that code contains ...